How to Access OCR/HHS Breach Reports

The Human Services Department of the US Office of Civil Rights Health (OCR) collects reports of data loss incidents submitted by entities in healthcare per the regulations stipulated in HIPAA/HITEC.

These events are processed as data breaches, alongside other sources that provide breach news and notifications. Data breaches that are sourced from the OCR have links referring back to it. These can be independently confirmed by searching for the event in the Office for Civil Rights Department of Health and Human Services Portal.

Data Lookup

To access and search for records in the Office for Civil Rights Department of Health and Human Services Breach Portal:

1. Select Show Advanced Options to expand the drop-down menu.

2. Type a simplified, lowercase version of the company name into the CE / BA Name Search field and then select Apply Filters.

   • Search for “bitsight,” instead of “Bitsight, LLC.”
   • If a company operates as a dba (doing business as), search both names to find the correct one.
   • If a name search does not yield results, leave all fields blank and change the Breach Submission Date range to when the breach was available in the Bitsight Security Ratings Platform. Several events may be returned using this search criteria.